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Field Office Acquiring Evidence 
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(Address) 


By, 


(City and Staid 


hS 

b7C 


To Be Returned [U Yes 


No 

Receipt Given □ Yes y( No 

Grand Jury Mated al - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 

□ Yes jZf 

Federal Taxpayer Information (FTI) 

□ Yes ^ 


No 


No 


Title: 





Reference: 



(Communication Enclosing Material) 


Description: Q Original notes re interview of 

Ox fm MU *H» m Abedfh diVi't/ik 

clfhtoiAz^ .COlhn) 


HRC-2974 



UNCLASSIFIED//Fet*e 


ALL FBI INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE I2-“06“2D16 BY J76J18T80 NSICG 


Hums Abedin Clinton E-mail ^ huma^clintonemaal.mEm l Analysis 


Kev Findings 

Analysis of two datasets in the FBI's possession revealed approximately 1,539 unique work-related e-mails 1 involving only two 
parties: hdr22@dintonemail.corn and huma@clintonemail,com (hereafter referred to as "CA party e-mails"). Hillary Clinton's 
legal team only turned over 32 CA party emails to the State Department in December 2014. 

When conducting their review of the -60,000 emails, Hillary Clinton's legal t£a 
huma@dintonemail.com (hereafter, "Huma CE") e-mail correspondence wi 
Huma CE e-mails in the 30,524 e-mail dataset 2 contained another search ter 
names and emails of key individuals, "Libya," "Benghazi"), indicating Huma t 
their own search terms to identify those emails for production. 



e entirety of 
Ire work-related. All 
process (e.g., 
isibly not used as 


Breakdown of all huma@cllntonemail.com E-mails in Origi 

Note: For taxonomy, emails were counted as individual emaiti 



Methodology used by Clinton's legal team to identify 30,524 work-related e-mall^^^^H total 

1. All emails containing a ".gov" email address [accounted for over 27,500 

2. First and last names of over 100 State Department and US government officials, including close aides and staff 

3. Sort by sender/recipient to identify non-obvious or non-recognizable email addresses, misspellings or other idiosyncrasies 

4. Key terms, including "Benghazi" and "Libya" 


The FBI assesses the 2,598 Huma CE emails In the original dataset were potentially determined to be work-related by Clinton's 
legal team as follows: 


30,524 total emails provided to 
the FBI; 2,598 hit on Huma CE 


2,338 Huma CE emails hit on a 
".sov" email address 


260 Huma CE emails hit on 
search terms other than ".gov" 




Other search 
term hit, 260 


Non- Huma Abedin 
key names and 
e-mails 4 , 2Z8 



11 Libya 11 , 29 

^-"Benghazi", 
"Tripoli", 1 


2 


Breakdown of huma@clintonemall.com E-mails in Additional Datasets Acquired by FBI 



GNsoaH ©cc-jq j*aitea»jG 



Original -30,000 

Datto Backups 5 

Cooper BlackBerry Backups 6 

Total hdr22@dintonemdll.C0ni DoS 

30,524 

16,276 

10,613 

[ tenu re e-mails in dataset 

| Unique work-related CA party e-mails 7 

32 

1,085 

454 


1 The FBI assessed e-mails to be work -related Vf they were related to Clinton's official capacity at DoS (e.g., scheduling, travel, call sheets, personnel appointments). 

2 According to Clinton's campaign website, 30,490 potentially work-related e-mails were provided to DoS on December 5, 2014. On August 6, 2015, Williams & 

Connolly provided the FBI a .PST file containing 30,524 e-mail messages, which they indicated was a copy of the emails provided to DoS. 

3 According to information available on Clinton's campaign website. 

4 E-mails included In the "N pn- Huma Abedin key names and e-mails" group includes the following individua ls: Cheryl Mills, Jake Sullivan] (Monica b6 

Hanley, Sidney Blumenthal j | the original e-mail in the chain did not include Abedin but b7C 

was included In original 30,524 e-mail dataset). 

S This dataset constitutes two backups made by the Datto device on 6/24/13 and 6/29/13 of the Pagliano Exchange Server 
e This dataset constitutes two separate backups Justin Cooper made of Clinton's Black Berries on 4/13/09 and 11/26/11. 

7 "Unique“ indicates the FBI reviewed all e-mails in this category to ensure they did not contain duplicates within and across the datasets (Le., if the same email 
appeared twice in the Datto Backups and once in the Cooper BlackBerry backups, it was only counted once instead of three times). 
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Sari a I Number: 
Serialized: 


1 

10/15/2015 


Casa Information 

Subfila: CART 


Type: 

Predication Source: 


Investigative 

Required 


Owning Squad: D5-CD4 


Status: Pending 


Case Managers: 


JONATHAN C 


MOFF 
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Case Participants: KABLE CHARLES H IV 
JONATHAN C» MOFFA 


Robert Allan Jones 
COLEMAN RANDALL C 
D5-CD4 (SC) 

D5-CD4 (QST) 


STRZQK PETER P II 
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Case Access; Prohibited to everyone except Case Participants. 

Case Summary: FBIHQ, Counterespionage Section, is opening a full 

investigation based on specific articulated facts provided by an 811 
referral from the Inspector General of the Intelligence Community, 
dated July 6, 2015 regarding the potential compromise of classified 
information- 


Details 

Document TitJa: (TJ) Subfile Opening Document 


1 Of 2 


HRC-2980 

11/2/2015 9:52 AM 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/15/2015 


On October 15, 2015, S J[ 


received a compact disk (CD) from FBI OTD 
containing photographs from a 1 0/3/2015 search at an Equinix facility in Secaucus, NJ. The CD is 
enclosed in an attached 1 A. 


be 
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Investigation on 1Q/Q3/2Q15 at Secaucus. NJ 


File # I 


(CART - i- Date dictated N/A b7E 

By 

1 

r 


L 

1 

be 



b7C 


This document contains neither recommendations nor conclusions of the FBI, It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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Precedence: ROUTINE 

To: INVESTIGATIVE ANALYSIS UNIT 

OPERATIONAL TECHNOLOGY DIVISION 

To: CART FORENSIC ANALYSIS UNIT 

OPERATIONAL TECHNOLOGY DIVISION 


Date: 10/20/2015 



From: 


u> 


iUI 


-HASHINGTQtL_EIKL 


NVRA, |_ 


D 


Contact : 
Approved By 
Drafted By: 


WF CART 

□ 


SSA 



WFO CART 

n 


Case ID # : (}^/NF^ 
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\- CART ( Pending) 


Title MID-YEAR EXAM; 

MISHANDLING OF CLASSIFIED; 

UNKNOWN SUBJECT OR COUNTRY; 

SENSITIVE INVESTIGATIVE MATTER (SIM) 

Synopsis: To request the assistance of the FBI Operational 

Technology Divisio n (OTP) Investiga tive Analysis Unit (IAU) in 
support of the casd 


T 



Classif i 
Derived 
)§classify On: 


F41M65J 

ST 

20401231 


d 20130301 


Administrative: (U//F OUO) DO NOT UPLOAD. ENSURE IT IS DISSEMINATED 

ONLY WITH A NEED TO KNOW AND IS APPROPRIATELY STORED. 

Details: 

(J^/WF-) The captioned investigation is highly sensitive and 
considered a prohibited investigation. Additionally, the 
investigation is designated a SI M and has an exemp tion for uploading 


approved by AD Randall Coleman 


Serial 1) . 


The writer requests the assistance of the FBI Operational 
' Technology Division (OTD) Investigative Analysis Unit (IAU) to 


b6 

b7C 


b6 

b7C 

b3 

b7E 


b3 

b7E 


b3 

b7E 


T/ /NOFORN 


HRC-2985 


b3 

b7E 


/ HOFORN 


conduct intrusion analysis and malware/virus analysis on the 
following digital evidence in support of case 


• 1B51: Dell PowerEdge R620 server. Service Tag: GXJWFX1 

including device itself and virtual machine files (with memory) 
located on device 


• 

1B46 : 


• 


1B46: 




• 

1B49 : | 




• IB# TBD by WFO ECC: Logs and events from Cloud Jacket IDS device 

• IBS 2 : BlackBerry cell phone 

• 1B53: BlackBerry cell phone 

• 1B54: iPad Model A1396 

• 1B45 : Dell PowerEdge 1950 server (Blackberry Enterprise 
Server), Service Tag: 5Y5XWB1 

• 1B3: Dell PowerEdge 2900, S/N: G842PC1 

• 1B2: Lenovo ThinkPad T420 PB-YC912 

• 1B1: Lexar micron 16 GB thumb drive, 1 Lexar Micron 8 GB thumb 
drive, 1 Kingston 8 GB DT SE9 thumb drive: 

o Request for Malware Analysis on these devices 

• 1B48: Datto Server 882 barcode C8470FC11M70024 used for system 
backups (cloud storage device) 

• 1B44: Supermicro server, S/N: 002590AFDEBE used for system 
backups (local storage device) 


(U/ /FOUO) Forensic images and/or copies of the above media will 
be provided by the Computer Analysis Response Team (CART) 
Headquarters (HQ) Forensic Analysis Unit (FAU) in Quant ico, 
Virginia. 


(U// F0U0 )[ 


b7E 


b7E 


(U/ / FQUO ) Contacts for this lead: 


Case agents: SSA ^ 
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WFO CART; TT Rrippi al i q h/ Frvrpn h i r. Examiner (ITS/FE) 


r*apT hh Fnrpnei r analvaic Unit: Supervisory ITS/FE 
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LEAD (s) : 

Set Lead 1: (Action) 

OTP DP-IAU 

AT OPERATIONAL TECHNOLOGY DIVISION, INVESTIGATIVE 
ANALYSIS UNIT 

(U/ /FOUO) Attention: SSa| 

Information provided for action deemed appropriate. 

Set Lead 2 : (Action) 

OTP DP- FAU 

AT OPERATIONAL TECHNOLOGY DIVISION, FORENSIC ANALYSIS 

UNIT 


Examiner 
appropriate . 


(U/ /FOUO) 


Attentio n : Supervisory IT Specialist /Forensic 
Information provided for action deemed 


♦ ♦ 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 1 1/06/2015 


On October 3, 2015, the following individuals from the Federal Bureau of Investigation (FBI) 
participated in the execution of an on-site search via consent at Equinix, Incorporated data center 
“Equinix NY2” at 275 Hartz Way, Secaucus, NJ 07094: 


] Sup 
jAtti 


Sup ervisory Special Agent (SSA), FBI Washington Field Office (WFO) 
Special Agent (SA), FBI WFO 
Attorney, FBI Office of General Counsel 


information Technology Specialist (ITS)/Forensic Examiner (FE) and 


Technical Program M anager, FBI Operational Technology Division (OTD) 
Computer Scientist (CS), FBI OTD 


ITS/FE, FBI WFO Computer Analysis Response Team (CART) 


The following individuals were also present: 


b6 

b7C 


Vestigant LLC 

Katherine M. " 

Timer, Esquire, Williams & Connolly LLP 
Project Manager, Platte River Networks (PRN) 
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Summary: 

The assistance of OTD and CART personnel was requested to support the search and seizure of 
digital evidence during the execution of a Consent to Search at the location referenced above on October 
3, 2015. 


Case reference: Case File Number 
CART Submission ID: 164461 
CART Service Request ID: 75561 

Specimens: 

The following computer-related equipment related to the PRN client “CESC” was located in the 
Equinix data center “Equinix NY2” within cage number 00260, cabinet number 205, hereafter referred to 
as the "CESC cabinet: ” 


Investigation on 
File# 


By ITS/FE 


1Q/Q3/2015 at Secaucus, NJ 


|CART~ 7 Date dictated N/A 








“jm/FE 


^ [sa] 1 



This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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Continuation of FD-302 of On-site search at 275 Hartz Wav. Secaucus, NJ — October 3. 20 1 5 . On 1 1/06/201 5 . Page 2 

1 . PRN Server : A Dell PowerEdge R620 server, Service Tag: GXJWFX1, powered on. 

2. BlackBerry Enterprise Server : A Dell PowerEdge 1950 server. Service Tag: 5YSXWB1, 
Express Service Code 12988372429, powered off. 

3. Seagate Desktop USB external drive: A Seagate Desktop 1 .0 TB Universal Serial Bus (USB) 
external drive, Serial Number (S/N): 2GHJ026M, plugged in to the PRN Server. 

4. Cisco NAS : A Cisco 324 Smart Storage Network Attached Storage (NAS) Device, S/N: 

QNP141 50082, plugged into Switch 1 and Switch 2. 

5. Datto Server : A Supermicro 2U (2 rack unit) server, Model: S2000, S/N: 002590AFDEBE, 
Invoice: 482547, used for Datto backups, powered on. 

6. Cloud Jacket Intrusion Detection System (IDS) : Cloud Jacket intrusion detection system, 
powered on. 

7. Firewall 1 : Fortinet Fortigate 80C Security Appliance firewall, located on top, powered on. 

8. Firewall 2 : Fortinet Fortigate 80C Security Appliance firewall, located on bottom, powered on. 

9. Switch 1 : PowerConnect 2824 network switch, located on top, powered on. 

10. Switch 2 : PowerConnect 2824 network switch, located on bottom, powered on. 

Details: 

At 8:12 AM, the individuals above entered the building at 275 Hartz Way, Secaucus, NJ 
07094. Individuals received visitor badges at the front office and entere d the Inbhv area nf the Enninix 
NY2 data center at approximately 8:22 AM. At approximately 8:24 AM 

escorted the individuals above to cage number 00260 and entered his credentials (biometric and pincode 
authentication) to open the cage and cabinet number 205 located within the cage where the computer 
equipment was stored. At 8:29 AM, the individuals above exited cabinet number 00260 to return to the 
lobby area of the building and begin the collection of data. 

At annrnximatelv 8:45 AM J flopp ed into the PRN Servei 

using the username “pmadmin” and the password 






PRN Server was done from 



I started a new Microsoft Word document entitled “On-site Visit” on his laptop and 

captured screen shot j information and datastores. This document was continually 

updated throughout the collection process to save information on settings, passwords, and configuration 


HRC-2992 
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Continuation of FD-302 of On-site search at 275 Hartz Wav. Secaucus. NJ - October 3. 2015 . On 1 1/06/2015 . Page 3 


data for the network and storage environment. At the end of the collection process, the documen t was 
saved! 


At approximately 8:55 AM, FBI OTP and CART personnel re-entered the “CESC cabinet” and 


Iwere sav ed to an Adobe Portable Document Format (PDF1 document 
the Backup Retention policy was set to 2 months and the 


Backup Schedule was set to every hour. While on site, after consultation with the investigative team, the 



he 

hie 

b7E 


h6 

hlC 

b7E 


he 

hlC 

b7E 


The BlackBerry Enterprise Server, Seagate Desktop USB external drive, and the Datto Server 
were removed from the PRN cage and cabinet and brought to the Equinix NY2 lobby area for seizure. 
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At 7: 1 0 PM, the search team exited the Equinix NY2 data center. 


Disposition of Evidence: 


At 7:03 PM, the following specimens were provided to the seizing agent, S4( 
and subsequent transport to the FBI WFO Evidence Control Center: 


for storage 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 11/06/2015 


On October 8, 2015, the following individuals from the Federal Bureau of Investigation (FBI) 
participated in the execution of an on-site search via consent at Equinix, Incorporated data center 
“Equinix NY2” at 275 Hartz Way, Secaucus, NJ 07094: 


Special Agent (SA), FBI Washington Field Office (WFO) 
,SA, FBI WFO 

Computer Scientist (CS), FBI OTD 
ITS/FE, FBI WFO Computer Analysis Response Team (CART) 


3 


The following individuals were also present: 




|Vestigant LLC 

Katherine M. T urner, Esquire, Williams & Connolly LLP 

project Manager, Platte River Networks (PRN) 
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Summary: 

The assistance of OTD and CART personnel was requested to support the search and seizure of 
digital evidence during the execution of a Consent to Search at the location referenced above on October 
8, 2015. 


Case reference: Case File Number: 

CART Submission ID: 164462 
CART Service Request ID: 75562 

Specimens: 

The following computer-related equipment related to the PRN client “CESC” was located in the 
Equinix data center “Equinix NY2” within cage number 00260, cabinet number 205, hereafter referred to 
as the “CESC cabinet: ” 

1. PRN Server : A Dell PowerEdge R620 server, Service Tag: GXJWFX1, powered on. The server 
was running the following Virtual Machines (VM) in the powered-on state: 


Investigation on 1Q/Q8/2Q15 at Secaucus, NJ 



This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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a. CESC-PRN: ESXi Host server for the “CESC” network. Microsoft Windows Server 2008 
R2. 

b. CESC-DC0I : Domain Controller for the “CESC” network. 

c. CESC-EXCH01: Exchange server for the “CESC” network. Microsoft Exchange 2010. 

d. CLNTrNETBB: BlackBerry Enterprise Server (BES) for the “CESC” network. 

e. vCenter: Centralized management for virtual machines and the virtual server environment. 

2. Cisco NAS : A Cisco 324 Smart Storage Network Attached Storage (NAS) Device, S/N: 

QNP1 41 50082. 

3. CloudJacket Intrusion Detection System (IDS) : Cloud Jacket intrusion detection system, 
pow r ered on. 

4. Firewall 1 : Fortinet Fortigate 80C Security Appliance firewall, located on top, powered on. 

5. Firewall 2 : Fortinet Fortigate 80C Security Appliance firewall, located on bottom, powered on. 

6. Switch 1 : PowerConnect 2824 network switch, located on top, powered on. 

7. Switch 2 : PowerConnect 2824 network switch, located on bottom, powered on. 

Details: 


At 10:20 AM, the individuals above, except Mrs. Turner, entered the building at 275 Hartz Way, 
Secaucus, NJ 07094. Individuals received visitor badges at the front office and entered the lobby area of 
the Equinix NY2 data center at approximately 10:22 AM to wait for further instruction from the 
investigative team and Mrs. Turner. At approximately 12:20 PM, the individuals exited the data center. 


At approximately 2:51 PMj 
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At appr oximately 6:36 PM. 


shut down the Cisco NAS. At approximately 6:48 PM, 


1 1 I * * - ^ 

Jshut down the physical PRN Server and unplugged it from the network. The PRN Server 


and Cisco NAS were removed from the CESC cabinet and cage and brought to the Equinix NY2 lobby 
area for seizure. 
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At 9:00 PM, the search team exited the Equinix NY2 data center. 

Disposition of Evidence: 

At approximately 6:50 PM, the following specimens were provided to the seizing agent, SA 

Ifor storage and subsequent transport to the FBI WFO Evidence Control Center: 


2. Cisco NAS 

3. PRN Server 
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Date of transcription 1/5/20 1 6 


In an ema il dated January 4, 201 6, Information Technology Specialist/Forensic Examiner (ITS/FE) 
uf the Federal Bureau of Investigation (FBI) Washington Field Office (WFO) C omputer Analysis 


Re sponse Team fCARTi provided the following d ocuments to Supervisory Special Agents (SSA^ 


Kespc 

and|_ 


T 


f the FBI Cyber Division 


Cyber Thre at Analyst, Nation al Cyber 


b6 

b7c 


Investigative Joint Task Force (NCIJTF) Office of Analytical Assessments (OAA), and| 
Information Technology Specialist, Investigative Analysis Unit, Operational Technology Division: 


1 ) 


2 ) 


by the Cyber Division, 


or further analysis 


The attachments were burned to a CD and are included in a 1 A envelope along with a copy of the email 
dated January 4, 201 6. 


b7E 


b7E 


Investigation on 1/4/20 1 6 at Washington. DC 


File# 


JcART- P? Date dictated N/A 


By IIS/F^ 

This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents arc not to be distributed outside your agency. 
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Date of transcription 1/13/2016 


In an email dated January 12, 2016, Information Technology Specialist/Forensic Examiner (ITS/FE) 

Jofthe Federal Bureau of Investigation (FBI) Washington Field Office (WFO) Computer Analysis 


Re sponse Team (CART) provided the following docu ment to Supervisor y Special Agents (SSA]I 
aildl — lofthe FBI Cyber Division, Sa[ hf the FBI Chicago Fielr 



Ir.vher T1 

to Serial 8 

k 


s 


if the FBI Chicago Field Office, and 


Cyber Threat Analyst, National Cyber Investigative Joint Task Force (NC1JTF) in reference 


CART): 
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b7E 


The file was burned to a CD and is included in a 1 A envelope. 


Reference Document: Serial 8 


■CART) 
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Investigation on I/12/2Q16 at Washington^ DC 


File# 


CART Date dictated N/A 
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b7E 


By ITS/FH 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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On February 4, 2016, Information Technology Specialist/Forensic Examiner (ITS/FE)] of 

the Federal Bureau of Investigation (FBI) Washington Field Office (WFO) Compute r Analysis Resnnn ^e Team 
(CART) provided a DVD containing the following documents to Special Agent (SA)| of the FBI 

Chicago Field Office for additional analysis: 


1 ) 

2 ) 

3) 

4) 


The documents above, identified hv review case n ame, contain] 

. . i i |The DVD containing the files above is enclosed in a 1A 

envelope for inclusion in the case file' 
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Investigation on 2/4/2016 at Washington, DC 


File # 


[CART Date dictated 


N/A 


By ITS/Ffl 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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Date of transcription 2/24/2016 


On February 24, 2016, Information Technology Specialist/Forensic Examiner (ITS/FE bf 

the Federal Bureau of Investigation (FBI) Washington Field Office (WFO) Comput er Analysis Respo nse Team 


(CART) provided a DVD containing the following document to Special Agent (SA 
Chicago Field Office for additional analysis: 


contain 


ins{ 


containing the file above is enclosed in a 1 A envelope for inclusion in the case file. 


taf the FBI 


The document above, identified bv the review case name 


\ 

HieDVD 
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Investigation on 2/24/2016 
File # 


at 


Washington^ DC 


CART- [| Date dictated N/A 


Bv ITS/FH 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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On February 29, 2016, Information Technology Specialist/Forensic Examiner (ITS/FE 


the Federal Bureau of Investigation (FBI) Washington Field Office (WFO) Computer Analvsis Response Team 

f a n -r\ * j A i _ r.n - i . I * ‘ 1 I . * r 




(CART) provided the following document to Special Agent (SA)| 
for additional analysis: 


Jof the FBI Chicago Field Office 


The document above contain^" 


□ 


reterenced m evidence item 1B67. 


and 


On March 4, 2016, ITS/Flj [provided the following document to SA | | for additional analysis: 


The document above contain J" 
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which was provided to the FBI on March 2, 2016. 


Two (2) DVDs containing the files above are enclosed in a 1 A envelope for inclusion in the case file. 


Serial \b ? 


Investigation on 3/4/2016 at Washington, DC 


File# 


CART "1*1- Date dictated 


N/A 


By USZJJ 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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On March 28, 2016, Information Technology Specialist/Forensic Examiner (1TS/FE)! 


of 


the Federal Bureau of Investigation (FBI) Washington Field Office (WFO) Compute ^ Analysis Resnop se Team 
(CART) provided a DVD containing the following documents to Special Agent (SA 
Chicago Field Office for additional analysis: 


fof the FBI 


1 ) 

2 ) 

3) 


The documents above contain| | 

evidence item 1B42, which is documented in Serial number 102 in the case file. The DVD containing the files 
above is enclosed in a 1 A envelope for inclusion in the case file. 


from 
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Investigation on 3/28/2016 

File# I fcART 




at Washington, DC 
Date dictated N/A 


By ITS/FE | | 

This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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Date of transcription 4/19/2016 


bf the 


On April 4, 2016, Information Technology Specialist/Forensic Examiner (ITS/FE) 

Federal Bureau of Investigation (FBI) Washington Field Office (WFO) Computer A nalyst R^nniw Tp»~ 
(CART) provided a DVD containing the following documents to Special Agent (SA)| of the FBI 

Chicago Field Office for additional analysis: 


2 . 

3. 

4. 

5 . 

6. 


Analyst 


On April 13. 2016, ITS/FE | I provided a DVD containing the following documents to Intelligence 

ft * 


for additional analysis: 


L 
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Investigation on 4/19/2016 at Washington. DC 


File# 


CART 




Date dictated 


N/A 


By 1TS/FH 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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2 . 

3. 
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Three (3) DVDs containing the files above are enclosed in a 1 A envelope for inclusion in the case file. 
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On May 9 } 2016, Information Technology Specialist/Forensic Examiner (ITS/FE 


bf the 


Federal Bureau of Investigation (FBI) Washington Field Office ( WFO) Computer An alysis Resnonse T eam 
(CART) provided a DVD containing the following documents to Intelligence Analyst 
additional analysis: 


[for 



he 

hlC 


b7E 


A DVD containing the files referenced above is enclosed in a 1 A envelope for inclusion in the case file. 


Investigation on 05/09/2016 at Washington, DC 


File# 


CART* f(j Date dictated N/A 


Bv ITS/FH 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency' it 
and its contents are not to be distributed outside your agency. 
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On May 13, 2016, Information Technology Specialist/Forensic Examiner (ITS/FE)| of the 

Federal Bureau of Investigation (FBI) Washington Field Office (WFO) Computer An alysis Response Te am 
(CA RT! provided a DV D containing the following documents to Intelligence Analyst [ and Special 

Agenl of the FBI Chicago Field Office for additional analysis: 


2 . 


3. 


he 

hlC 


b7E 


Two (2) DVDs containing the files referenced above are enclosed in a 1 A envelope for inclusion in the case 

file. 


Investigation on 05/13/2016 


File# 


JcARLril 


at Washington, DC 
. Date dictated N/A 


By JTS/FH 
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and its contents are not to be distributed outside your agency. 
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TRANSITORY RECORD 
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10123 : 

TRANSITORY RECORD 



Per our discussion, please find the attachment detailing the lead to IAU. 
Here is the contact information for the filter team: 

■ sj I 


A lead has been set for CART FAU as well for the copies of the media per the attachment. 
Please let me know if you have any questions. 

Thanks. 


IAU_EC_Oct20_20 

15 -docx 
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PDO40 (Rev, 4-H-OJ) 

Fite Number 

Field Office Atqul 

Serial U of Origin 
Date Received 
From 

(Address) 


(City and Stale) 



Receipt Given O Yes No 

Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 

Federal Rules of Criminal Procedure 

n Yes 0 No 

Federal T axpayer Information (FTI) 

□ Yes □ No 

' /hK'HflWtn- iWCr of CL/fC£T'F:TfcI>; 

IAKJ iCAVo wl/^ SUf3T6CI oL COUNTRY; 

5 QJ^TJTV £ 3*)\j6s TXfrATTVS ! Te£ ( SjT^ ) 

Reference: 

(Communication Enclosing Material) 




HRC-3052 




s 


V) ( pBI > 


From: 

Sent: 

To: 

Cc: 

Subject: 

SentinelCaseld: 


JWF) (FBI) 


CLASSIFIED BY NSICC- J76J18T8D 
REASON : 1.4 ( C > 

DECLASSIFY ON: 12-31-2041 
DATE : 01-12-2017 


b6 
b7C 

ALL INF QRMAT ICN CONTAINED 

'herein is unclassified except 

WHERE SHOWN OTHERWISE 




Per our discussion last week, attached are the following documents: 


he 

hie 


ii 


As always, please let me know if you have any questions. 


b7E 


JPlease note the 4- to 5-digit number (— xxxxx) above each entry. 
This number corre sponds to the item number in the CART review system and will help us track the item back to 
lif needed. 



Thanks, 




he 

hie 


b7E 


Classification 



1 


HRC-3053 



DECLASSIFIED BY: MS I DC J37J85T94 
QW 05“18“2Q17 



R)-)40 (Ik v 4-1 1-03) 

File Number 


Field Office Acquiring Evidence 

Serial # of Originating Document 
Date Received 
From 


XL 


Ifo 




x-\ s ire 


(Name dH 


CAtVT 


[ i>a ly'FO 

(Address) 


b3 

b7E 


b6 

b7C 


(Cily and Slate) 


By ITS /R ; 


bS 

blC 

To Be Returned 0 Yes 

'□ No 


Receipt Given 0 Yes 

□ No 

Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 

Federal Rules of Criminal Procedure 


□ Yes 

□ No 

Federal Taxpayer Information (FT!) 


0 Yes 

0 No 


•;U! /knwe/te cy 

MfSH 4 *JE>UTn. ! 6- C L/I^^KTeJ); 


Lx^JjCtcOv.e'fcJ .It C I C ( o Ufv/‘- 1*-' ? 

SfriOSJ TJ v/c JTiCVLS TT'orl OVc Mf^TTC /l 'i 


Reference; 


(Comma ni cal ion Enclosing Material) 


Description: 


Q 


Original-notes-reJntervie.W-of- 



be 

b7C 

b7E 


HRC-3054 




DECLASSIFIED BY: NSICG J37J85T34 
CM D5-1&-2017 



\ A l® 


ro -34ft (Rev. 4-L1-0J) 

File Number 


r a * 


Field Office Acquiring Evidence 

Serial tt of Originating Document 

Date Received F/V/xc'd & 


WfD 


m. 


From 


~I~-\S hr fl 


(N; 


ra-X - i >J fo 


(Address) 


b 3 
b7E 


b6 

b7C 


(City and Suite) 

By xrrxJFX' 


To Be Returned □ Yes £3 No 

Receipt Given O Yes 0 No 

Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 

□ Yes 0 No 

Federal Taxpayer Information (FTI) 

0 Yes Cf No 


Hi G 


|V\j ^ rl * ^ > 

rVKTs-H ft M7> u>iv/G- cf C L/lsST-fir-^ 


inj i^iV o uAJ Sv'?^tcT ot<if 

4 x rl v X i/£Vr (do /0 f 1 t x ^ 


Reference: 


(Communication enclosing Material) 


b6 

b7C 


Description: ^3 Original-notes re-interview 

D r‘ i 


b€ 

b7C 

b7E 


i (X > &£ 2 J ^ | j ^ 4oi- Sf ^ 



HRC-3055 



DECLASSIFIED BY: NS ICG 
OH 05-18-201? 


J37J85T94 


( 



Atl 


10040 [Rev 4-11-03) 
File Number 


-CftRT 


Field Office Acquiring Evidence 


U;Fo 


Serial # of Originating Document 


Date Received '2-/ 2- | 

1 fc 

From 2TS }F£ 



(Name 



(Address) 


b3 

b7E 


bS 

blC 


(City ami Slate) 

By ~PT s jr c 


To Be Returned CD Yes 0 No 

Receipt Given CD Yes t^D^No 

Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 

0 Yes CD No 

Federal Taxpayer Information (FTI) 

0 Yes 0 No 


U) 


pz tp'iwfi 

i O £— d 6W -Uu l ?-'( i . 

fiOL/£srrc-/?Wfc /Wrre£ 


Reference: 


(Communication Enclosing Material) 


hS 

blC 


Description: 

0 Original notesreinterview-o] | 


bV/D 










2*/2 vf 7 /j.Ui Kiv'*- 1 CyL><^ 


b6 

b7C 

b3 

b6 

b7C 

b7E 




yAurtT-mranit 


HRC-3056 




DECLASSIFIED BY: HSICG J37JS5T94 
□H 05“13“2017 


I 


r 


rn-340 [Rev 4-1 1-03) 

File Number 


l A \'V 

-CAeT 


Field Office Acquiring Evidence 

Serial # of Originating Document 

Dote Received 3 |m ( 


iLrb 


Ik. 


From 


-^PrS |PL 


IVfb 


(Address) 


b3 

b7E 


hS 

b7C 




(City and Stale) 

By 

.trrsjiTb. 



To Be Returned 

□ Yes 

DTno 


Receipt Given 

□ Yes 

DNo 


Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 

□ Yes 

Federal Taxpayer Information (FTI) 

O Yes 


□ No 
EfNo 


^/UsjrritvS 'jAj^srjrc^rriy^ 


b6 

b7C 


Reference: 


(Communication Enclosing Material) 


Description: Original notes-re-mterview of 


^DVD r.wfo'.n^ 





r-tce^ti Lw L3 X- p ^ 3 1 z jZ'bik? 

: ^adli_ 

JSESggff /NOFORM 


b6 
hi C 

b7E 


HRC-3057 



DECLASSIFIED BY : 1JSICG J37JS5T34 
DIT 0 5 “1 8 “2017 



Field Office Acquiring Evidence 


Wv 


Serial # of Originating Document 

Date Received 3 1 2-? f (y 

From -L i 1 1" fS 

(Nhvic of Coi 


b3 

b7E 


b6 

b7C 


(Address) 


(City and Stale) 

By TT<> I ft 

To Be Returned ID Yes Cf^No 

Receipt Given D Yes EL No 

Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 

□ Yes 

Federal Taxpayer Information (FTI) 

□ Yes 



Ui^ 7 

\>f) 



__ 

iflXi ht$ kJb c*- C 

5^/j5j7rrv'£ ■jYuveSTxGo'lTjrv't 


WlTTc£ ( srm) 


Reference: 


(Communication Enclosing Material) 


bS 

b7C 


Description: ^ Original notesTe“intervrewirf 


h€ 

bic 

b7E 


ft L 


j \ Cl ^ ^ I ^ V lA LAI^A J ^ ^ ) 


| A 


ssSSL f/VWGPORH 


HRC-3058 



DECLASSIFIES EY : 
□IT 0 5 “1 8 “2017 


NS ICC J37JS5T34 


FD-340 (Rev. 4-1 1-03) 

File Number 

Field Office Acquiring Evidence 
Serial # of Originating Document 



U>rO 

1*5 


CA/tT 


Date Received 
From 


qj 

Tr<. \ffr 

(Name of C Vimh i ■ p 


b3 

b7E 


b6 

b7C 


(Address) 


(City and Stale) 


By 


:Prs /F6 


0No 

0No 


b6 

b7C 


To Be Returned 0 Yes 

Receipt Given 0 Yes 

Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 

0 Yes □ No 

Federal Taxpayer Information (FTI) .. 

0 Yes 0No 


M/Y 


II! 





Reference: 


(Communication Enclosing Material) 


Description: Q OriginaLnotes re^interview of 


C i J T") v ( & ^4 /jt - ^ 





X* ^ (L--le.s S < , 








b6 

b7C 

b7E 


HRC-3059 



CECLAS3IFIEE BY: US ICG J37JB5TS4 
OU 05-18-2017 


H}-}40(Rev. 4-11-03) 

File Number 


- ctfcr 


Field Office Acquiring Evidence 
Serial ft of Originating Document 


iMt-P 

Alx_ 


Date Received 
From 


r/q 

~£ts \ft \ 

1 (S 


(Address) 


b3 

b7E 


b6 

blC 


(City and State) 

By 7FTS | re 

To Be Returned □ Yes ETNo 

Receipt Given D Yes El No 

Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 

□ Yes 

Federal Taxpayer Information (FTI) 

□ Yes 



lUi A f- £* ^ ", 

X ^ 'iff “SH *- TttJCrcjf ClA^I- fTf Q) , 


UsAto® ^ 50gE6LTc^ - w-rTtip: Ax*n) 

C f^>x.Tx&e x^v/fcSTic^-Txug /*"rrw J > 


se^TXvi 

Reference: 


(Communication Enclosing Material) 


b6 

b7C 


Description: ^ OrigtnalnotesTeinterliuw^i 


£)\t ^ ^ ^ ^ c 



- 


b6 

b7C 

b7E 


HRC-3060 



f 


DECLASSIFIED BY: MS ICC J37J8BT94 
ON G5-18-2Q17 


^£GSEt//M0F0BW- 


FDO40 (Rtv 4-1 1-03) 
File Number 


OQ £T 


b3 

b7E 


n 


Field Office Acquiring Evidence . 

Serial it of Originating Document 

Date Received ^1 i ? 1 

From 


i.t/Fo 


F6 


b6 

b7C 




(Address) 


(City and State) 

By JT $y bg - 


To Be Returned D Yes ET^ No 

Receipt Given D Yes Q^o 

Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 

□ Yes CKNo 

Federal Taxpayer Information (FTI) 

□ Yes C^'No 



;Uf GxfrM, 

I^I£a;oka;s^^Tc^ coukJt^/ 


bS 

b7C 


Reference: 


(Coniniuni cation Enclosing Material) 


Description: Qri&mai-ftotes rcrintemew^o 




XrQ\f fTt oia4 ( <2 /v 

f ! 




_*Vg^ l _‘V>Q »^i 6. (y5 L S 


y /Moranw 


b6 

b7C 

b7E 


HRC-3061 




FEDERAL BUREAU OF INVESTIGATION 
FOI/PA 

DELETED PAGE INFORMATION SHEET 
FOI/PA# 1353814-0 


Total Deleted Page ( s ) = 6 


Page 

96 - 

b3 ; 

b 6 ; 

b7C; 

b7E; 
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97 - 

b3 ; 

b 6 ; 

b7C; 

b7E; 
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98 - 

b3 ; 

b 6 ; 

b7C ; 

b7E ; 
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99 ^ 

b3 ; 

b 6 ; 

b7C ; 

b7E ; 

Page 

100 
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; b 6 

; b7C 

; b7E 
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; b 6 

; b7C 

; b7E 
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DECLASSIFIED BY: HSICG 
ON 05“1S “2 0 1 7 


J37J85T34 


FD-1057 (Rev r 5-8-10) 



/HOFORH 



FEDERAL BUREAU OF INVESTIGATION 

Electronic Communication 


Title: (U) Grand Jury Subfile Opening Document Date: 08/27/2015 


From: LOS ANGELES 



MISHANDLING OF CLASSIFIED; 

UNKNOWN SUBJECT OR COUNTRY; 

SENSITIVE INVESTIGATIVE MATTER (SIM) 


Synopsis: (U) To open a GJ subfile to serve as a repository for Grand 

Jury related material. 



Details : 

This document shall serve as opening communication for: 


hGJ 


b3 

b7E 



HRC-3062 


ALL FBI INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 12-22-2D1S BY J76J1STSQ MS ICC 


F D-302a (Rev. 10-6-95) 


- 1 - 

FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 08/27/20 1 5 


On Au gust 27. 2015. Special Agenj 


States AttomeM 


physically served a s ubpoena tol 


]telephonically contacted Assistant United 


of the Eastern District of Virginia, who provided that he 


b3 

b6 

b7C 

b7E 


The subDoena was accepted by 


telephone numbei 

an behalf ofj 


b3 

h€ 

hlC 

b7E 


Investigation on 08/27/2015 at Washington, DC 

h& T - 3- 


File # 


Date dictated N/A 


By S 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 


b3 

b7E 

b6 

b7C 


HRC-3063 




b6 

b7C 



HRC-3064 > 




Hello, 


Please find the attached response to your legal request. If you have any questions regarding this production, 
please reply to this email and include the Internal Reference Number provided in the attached letter. 




l 


HRC-3065 


fo3 

b7E 


ALL FEI INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 



From: 

Se nt: Monday 

ToJ , 

Subject: FWl 


USAVAE) 

31, 2015 9:32 AM 
If USAVAE) 

H Responsive Information to Your Legal Process 


Fromi 


(WF) (FBI) 


Responsive Information to Your Legal Process 


Hello, 

Please find the attached response to your legal request. If you have any questions regarding this production, 
please reply to this email and include the Internal Reference Number provided in the attached letter. 


We ask that you submit all future leeal process throuelf 



b3 

b€ 

blC 

b7E 


b3 

b6 

b7C 

b7E 


b3 


b3 

b7E 


1 


HRC-3066 


DECLASSIFIED BY; NS ICG J37J85TS4 
DN 05-1S-C017 


FD-10S7 (Rev. 5-8-10) 



FEDERAL BUREAU OF INVESTIGATION 


ill) 


Event Title: 


Collected Item Log 


Mid Year Exam 


Date: 09/08/2015 


Approved By 



Drafted By: 


•in 


Case 


ID 


#: 


hGJ 


{Spt$£) MIDYEAR EXAM; 

MISHANDLING OF CLASSIFIED; 

UNKNOWN SUBJECT OR COUNTRY; 

SENSITIVE INVESTIGATIVE MATTER (SIM) 


he 

hlC 


b3 

b7E 



Receipt Given? : No 


Holding Office: WASHINGTON FIELD 


Details: No Details Provided 


Item Type 

IB General '-.U ) 


ins cription 


Collected On: 09/08 /2015 

Seizing Tndiv-i dual : f I 

Collected By: 

Location Area: NA 
Specific Location: NA 


b3 

b7E 


hS 

hlC 


♦ ♦ 


This document contains neither recommendations nor conclusions of the FBI It is the property of the FBI and is loaned to your agency, it and its 
contents are not to be distributed outside your agency. 


HRC-3067 



$ 


b6 

b7C 



HRC-3068 



FD-302a (Rev. 10-6-95) 


UNCLASS IFIED/ /FQU& 


ALL IHFQRI^TION CONTAINED 

HEFcEIl'I IS UNCLASSIFIED 

CATE 12 “ 22“201 f BY J7GJ1ST8Q NS ICG 


- 1 - 

FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 09/02/201 5 


(U//TDU©*) issued in the United States District 

Court fo r the Eas tern Distri ct of Virginia onT 


served onf 


1 


was 


by email at 

Immediately following th e email described above , the 

1 ^^acknowledging the 

requested a soft copy 


writer received an automated response f rom| 

contact. At 4:09 PM on August 31, 2015 

of the legal process. The writer responded on September 01, 2015 with 


a . txt file containing only| 
preservation letter. 


from the 


b3 

be 

bic 

b7E 


(Uff ttU Gf A copy Of 


and emails described above 


are attached to this communication in an FD-340. 


b3 

b7E 


Investigation on 08/31/2015 at 


File# 


-GJ -5 


Washington, DC 

Date dictated 09/02/20 1 5 


h , sa| — | h M 10 * 

This document contains neither recommendations nor conclusions of the FBI It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 


b3 

b7E 

b6 

b7C 


UNCLASSIFIED/ /-FOU © 1 


HRC-3069 



he 

hlC 


HRC-3070 


UNCLASSIFIED/ /*■©*}©- 


ALL FBI INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 1 2“2 2 “ 2 □ 1 6 BY J76J18T80 NSICG 


FD-302a (Rev. 10-6-95) 


- 1 - 

FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 09/03/2015 


(U/ /FOUO) At 4:43 PM on September 01, 2015, the United States 
Attorney's Office in th e Eastern District of Virginia nnfifipri FBI 

subpoenas were served tc A copy 

of the notification and the subpoenas are attached to this 
communication in an FD-340. 


b3 

b7E 


Investigation on 09/01/2015 at 


File # 


}gj - y 


Washington, DC 

Date dictated 09/03/2015 


by Sa| | 

This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency: it 
and its contents are not to be distributed outside your agency. 


b3 

b7E 

b6 

b7C 


UNCLlAS SIFTED/ /-F OUO 


HRC-3071 



b6 

b7C 



HRC-3072 


UNCLASSIFIED/ /F6S& 


ALL FBI INFORHAT IGN CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 12-22-2D1S BY J7GJ18TSD NS ICG 


FD-3Q2a (Rev. 10-6-95) 


- 1 - 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 09/08/2015 

(U/ /FOUO) At 2:35 PM on September 08, 2015, the United States 


RiibnnPTiaR mptp RPrvPii tn\ 



1 A copy of the notification and the 


b3 

b7E 


subpoenas are attached to this communication in an FD-340. 


Investigation on 09/08/201 5 at _ 

|GJ ~1 


Washington, DC 


File U 


Date dictated 09/08/2015 


by S£t 


rfe/zon' 


b 3 
b7E 

hS 

blC 


This document contains neither recommendations nor conclusions of the FBI, It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 


UNCLASS I FIED/ /Fee©- 


HRC-3073 



b6 

b7C 


HRC-3074 



UNCLASSIFIED/ /i=ee© 


ALL FBI IMFORMATIO M CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 12-22-2016 BY J76313TS0 MS ICG 


FD-302a (Rev. 10-6-95) 


- 1 - 

FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 09/08/2015 


(U//-F@tJ©-) On September 4, 2015, SA 


received 


an email from the United States Attorney's Office for t he Eastern 


District of Virginia co ntaining a subpoena response from 

The response is attached to this communication 


in an FD-340. 


b3 

be 

b7C 

b7E 


Investigation on 09/04/201 5 at . 

File it | fcj - S 


Washington. DC 


Date dictated 09/08/2015 


by_ 


sa! 


G^/c^Izoff 


This document contains neither recommendations nor conclusions of the FBI, It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 


b3 

b7E 

bS 

blC 


UNCLASSIFIED/ /.E©¥© 


HRC-3075 



yO 


bS 

blC 



HRC-3076 




ALL INFORIIATIGN CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 1 2 “22“201 ^ BY J7GJ18TSD NS ICG 


FD-302a(Rev. 10-6-95) 


- 1 - 

FEDERAL BUREAU OF INVESTIGATION 




This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 


UNCLASSIFIED/ /-F©£J0* 


HRC-3077 


b7C 




ALL mTUm+ATlCm CONTAINED 


FD-302a (Rev. 10-6-95) 


UNCLASSIFIED/ /POtTO 


HEREIN IS UNCLASSIFIED 

DATE 12-22-2015 BY J75J1STS0 NSICC 


- 1 - 

FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 09/08/2015 


(U// FOUO ) On September 9 y 2015, SAl 

a Federal Express package , tracki ng number 

1 The package contained f 


1 received 


b3 

bS 

hlC 

b7E 


m response to subpoena 


was placed into evidence . 


is attached to this communication in an FD-340 , 


Investigation on 09/08/2015 at , 

File# I Id -I* 5 


Washington, DC 


Date dictated 09/08/2015 


hv s,'! — | \ffdlw6 

This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency, it 
and its contents arc not to be distributed outside your agency. 


b3 

b7E 

bS 

b7C 


UNCLASSIFIED/ 


HRC-3079 


b6 

b7C 




UNCLASSIFIED/ y4=©t?€r 


ALL FBI INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 12-2 2 -2 D 1 6 BY J76J1STS0 NSIC 


FD-302a (Rev, 10-6-95) 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription Q9/Q8/2Q15 


(U/ /TOU0) On September 4, 2015, SA received 

an email from the United States Attorney' s Office for th e Eastern 
District of Virginia contai ning a subpoena response froml 

The response is attached to this 1 

communication in an FD-340. 



This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency: it 
and its contents are not to be distributed outside your agency. 


UNCLASS IFIED//Feuer 


HRC-3081 



b6 

b7C 


HRC-3082 




UNCLAS S I F I ED / 


ALL INFOR&£ATIGN CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 12-22-2D1S BY J7GJ18TSD NS ICG 


FD-302a (Rev. 10-6-95} 


- 1 - 

FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 09/1 0/20 1 5 


On September 9, 2015. SA 


] received 


(U// TOOO] 

an email from| | The email and 

attached files conta ined a supplemental response to subpoena | ~| 


] The email and files are attached in this 


communication in an FD-340. 


b3 

b6 

b7C 

b7E 


Investigation on 09/09/20 1 5 at Washington. DC 



This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 


b3 

b7E 

bS 

blC 


UNCLASSIFIED/ 


HRC-3083 



b6 

b7C 





HRC-3084 



ALL mTOmSATim CONTAINED 




UNCLASSIFIED/ /TOt?© 1 


HERE IH IS UNCLASSIFIED 

DATE 12-22-2015 BY J75J1STSD NS ICG 


FD-302a (Rev. 10-6-95} 


- 1 - 

FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 09/25/2015 


(U//FOUO? 

On September 24, 2015, SA 

received 

an email from I - 

Icontaininq a 

subpoena response to 


1 

1 The response is attached to this 

communication in an 


FD-340 . 


Investigation on 09/24/201 5 at Washington, DC 


File# I 

GJ - 

|3 

Date dictated 09/25/2015 

1 

bv SaI 




1 


J 

— i f “ — — — 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is. loaned to your agency; it 
and its contents are not to be distributed outside your agency. 


b3 

b7E 

bS 

blC 


UNCLASSIFIED/ /-F©U© 


HRC-3085 


HRC-3086 



ALL FBI INFORMATION CONTAINED 

HEREIN 15 UNCLASSIFIED 

CATE 12“22“201« BY J76J18TSD NS ICG 


FD-302a (Rev, 10-6-95) 


- 1 - 

FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 09/29/2015 


OJ/ffOtJO) On September 28. 2015, SAl 


received a letter fro 


JThe letter contained a response to subpoena[ 


i 


indicated they were unable to find any info rmation respon sive to 

of the 


the request. A Grand Jury Subpoena Duces Tecum Report was returned via email d 
U.S. Attorney’s Office, Eastern District of Virginia, on 9/29/2015. The referenced 
attached to this communication in a 1A. 


b3 

b6 

b7C 

b7E 


letter is 


Investigation on 09/28/2015 


at 


Washington, DC 



This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 09/29/20 1 5 


(Ufff Gtm On September 29. 2015. S A 


received a letter and Suhnqena 


response fronj 
and acco mpanying documents were address ed to SA[ 


subpoena| 
via email 
referenced 


a 


The letter 

|and contained a response to 
A Grand Jury Subpoena Duces Tecum Report was returned 
of the U.S. Attorney’s Office, Eastern District of Virginia, on 9/29/2015. The 
return is attached to this communication in a 1 A. 


fo3 

b6 

b7C 

b7E 


f* 


Investigation on 09/28/2015 


at 


Washington, DC 



This document contains neither recommendations nor conclusions of the FBI It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 


b3 

b7E 

bS 

blC 


HRC-3089 



b6 

hlC 


HRC-3090 




This transmission may contain confidential information intended only for the person(s) named above. Any 
other distribution, re-transmission , conving or disclosure is strictly prohibited. If you have received this 
transmission in error, please notifi immediately and delete this file/message from your 

system. 


-Gy -/w 


HRC-3091 


b3 

b7E 







Frnmf 


htJE) (FBI)" 




Date 
ToJ 
Cc 


(WF) (FBI)" 


To Whom It May Concern, 


In the response below, information for the subpoena regarding \s 

provided. While the email cites the legal request for information for i 


have received no correspondence with regard to that request. Please confirm that 
information is forthcoming. 


Sincerely, 


b3 

bS 

hlC 

b7E 


b3 

b6 

b7C 

b7E 


I 

Federal Bureau of Investigation 
Washington F ield Office 


b6 

b7C 


b6 

b7C 


FromJ 

Sen« 


To:| 

Subject^ 


IfWFUFBIl 


Via Email Delivery 


Special Agen| 

United States Attorney’s Office 
Eastern District of Virginia 
Alexandria Division 
Alexandria, Virginia 


Dear Special Ageni 


Or received a legal request for information relating to| 



1 After a reasonable search of our records, no 


information was found foj 




This information was prepared byl 


Jin the ordinary course of 


business and was obtained during a reasonable search of our records based on the 
information provided to us for identification. 


Regards, 


b3 

bS 

blC 

b7E 


bS 

blC 


bS 

blC 

b3 

bS 

blC 

b7E 


b3 

b7E 


2 


HRC-3092 



b3 

b7E 




This transmission may contain confidential information intended only for the 
person(s) named above. Any other distribution, re-transmission, copying or 


disclosure is strict! 
please notify 
from your system. 


pu have received this transmission in error, 
immediately and delete this file/message 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/5/2015 


(TJ//FOUO) On October 5, 2015, received a letter and Subpoena response 

froml 

|The response was in 

regards to subooena 

A Grand Jury Subpoena Duces Tecum Report was 

returned via email to 

jf the U.S. Attorney’s Office, Eastern District of Virginia, on 

1 0/5//20 1 5. The referenced 

is attached to this communication in a 1 A. 


Investigation on 10/5/2015 


File # 




at 


- a 


Washington, DC 

Date dictated N/A 





This document contains neither recommendations nor conclusions of the FBI, It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/06/2015 


OJ//FOtJO) On October 2, 2015, SA\ 


attachments to 


u 


rrhe email from 


? 

Jcc 


eceived an email from 


returned via email 
10/06/2015. The 


iilJ 

i refc 


ubsequently forwarded said email and 
contained a letter response to subpoena^ 

|A Grand Jury Subpoena Duces Tecum Report was 

|o f t he U . S . Atto mey’ s Office, Eastern District of Virginia, on 


b3 

b6 

b7C 

b7E 


erencec 


mail, letter, and attachments, are maintained in a 1 A. 


Investigation on 10/02/20) 5 at _ 

File# I bj ~ 18 


Washinptom DC 


Date dictated 


N/A 


Bys^ 


This document contains neither recommendations nor conclusions of the FBI ft is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 1 0/8/20 1 5 


"[receiv ed 


(U/ffQyQj O n October 8, 2015, SA| 

| The letter, wh ich was faxed to the[ 
forwarded via email to S A (contained a response to subpoena] 


a letter ffoirJ 


(U S AO/ED V A) and subsequently 


Grand Jury Subpoena Duces Tecum Report was returned via email to| 

Office, Eastern District of Virginia, on October 8, 201 5. The referenced! 
communication in a 1 A. 


1 of the U . S . Attorney ’ s 
|is attached to this 


b3 

fo6 

b7C 

b7E 


Investigation on 10/8/2015 


File# 


Igj 


at 


nil 


Washington, DC 

Date dictated N/A 


BySj j . 

This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency, - 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/14/2015 


(\ I WftWQl On Ortfnher 14. 701 S. SA 1 

received a FedEx package from[ 


subsequently forwarded said package 


to~S^ 


The p ackage fronf 


package irorq 

J The letter indicated 


contain ed a letter response to subpoena 


b3 

b€ 

blC 

b7E 


Idoes not have any responsive 


documentation t o the request^ 

A Grand Jury Subpoena Duces Tecum Report was returned via email tJ 


the U,S, Attorney’s Office, Eastern District of Virginia, on 10/14/2015, The referenceq 
letter is maintained in a 1 A. 


Lt 


Investigation on 10/14/2015 


at 


Washington, DC 



b3 
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bS 
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This document contains neither recommendations nor conclusions of the FBI, It is the property of the FBI and is loaned to your agency, it 
and its contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/15/2015 


gj/ffOUffl On October 15. 2015. SaT 


subpoenal 


I The nackaee frorrT 


contained a letter and| 
Th e letter indica tecj 


_ received a FedEx package from 
Subseq uently forwarded said p ackage to SA 
| in response to 


Representing Response to the aforemen tioned subpoena. A 

n __ JTrU Lt+u* t t c a ’ 


Grand Jury Subpoena Duces Tecum Report was returned via email tc| j of the U.S. Attorney’s 

Office, Eastern District of Virginia, on 10/15/2015. The referenced letter and | p re maintained in a 1A. 


b3 

b6 

b7C 

b7E 


Investigation on 1Q/15/2Q15 


File ^ 


|GJ_ 


at 




Washington. DC 

Date dictated N/A 




This document contains neither recommendations nor conclusions of the FBI It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/19/2015 



subseque ntly forwarded said pac kage to |The package from| 

contained a le tter and |in res ponse to subpoena l 

letter ind icated |O n 1 0/19/20 1 5, SA | contacte d who 

provided A Grand Jury Subpoena Duces Tecum Report was 

returned via email t d b f t he U. S. Attorney’s Office, Eastern District of Virginia, on 

10/19/2015. The referenced letter and | ^ >re maintained in a 1A. 


Investigation on 10/16/2015 

File M I IgJ 


Wasbineton^DC 


Date dictated N/A 


This document contains neither recommend at ions nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency, it 
and its contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Dale of transcription 10/19/20)5 


OJ/ffepenOn October 19, 2015, S k[_ 


indicated 


3 

Jconta 


ubsequently forwarded said bac^aga to . S ^ 
ontained a letter in response to sufrxrertai 


R eceived a UPS p ackage from 


£ 


was unable to locatq 


The packa ge from 
The letter 


Irdu uest ed with the int ormation provided 

J 1 1 j S' . 1 T T 1^1 


of the U.S. 


A Grand Jury Subpoena Duces Tecum kepart tvas retugifa via entail to| 

Attorney’s Office, Eastern District of Virginia, oh l0/I9/2-(jHj> The referenced letter is maintained in a 
1A, 


b3 

b6 

b7C 

b7E 


Investigation on 10/19/2015 


at 


Washington^ DC 



This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/19/2015 


(U//F OUQ ) On October 19, 2015, SAl 


[ subsequently forwa rded said package to S^[ 
Jontained a response to subpoen al 


"Received a FedEx package fronj 
~| The package from 


Tecum Report was returned via email td 


\ A Grand Jury Subpoena Duces 
of the U.S. Attorney's Office, Eastern District of 


Virginia, on 10/19/2015. The referenced subpoena return is maintained in a 1A. 


b3 

be 

b7C 

b7E 


I 


Investigation on 10/19/2015 at Washington. DC 

File# J | gj Date dictated N/A *>3 

b7E 


bS 

blC 

This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 1 0/22/20 1 5 


rU//EQ^6) On October 22. 2015. SAl 


forwarde d said package to 
subpoena j 


via emai M 

referenced subpoena return is maintained in a 1 A. 


received a FedEx package from 
subsequently 


The package ffon [contained a response to 


A Grand Jury Subpoena Duces Tecum Report was returned 

of the U.S. Attorney’s Office, Eastern District of Virginia, on 10/19/2015. The 


b3 

be 

b7C 

b7E 


Investigation on 10/22/2015 


at 


Washington, DC 



This document contains neither recommendations nor conclusions of the FBI r It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 


b3 

b7E 

b6 

b7C 


HRC-3111 






HRC-3112 



ALL FBI INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 12-22-2Q1& BY J7SJ13T80 HSIC 


FD-302a (Rev, 10-6-95) 


- 1 - 

FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 1 Q/23/2Q1 5 


from 


<1 On Ortnhpr 73 701 *i si~ 


"l~pppivpH a letter and Snhnnpna response 


response, whi ch was addressed to S A 


was in regards to subpoenf 


A Grand Jury Subpoena Duces Tecum Report was returned via email to[ 
U.S. Attorney’s Office, Eastern District of Virginia, on 10/23//2015. The referencedj 
attached to this communication in a 1 A. 


Jlhe. 


I 


the 


ns 


b3 

b6 

b7C 

b7E 


Investigation on 1 0/23/20 1 5 


at 


Washington, DC 



This document contains neither recommendations nor conclusions of the FBL It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/26/2015 


qj//P 0tje^ On October 23, 2015, SA 
in the form oi 


received a letter and Subpoena response, 


The response was provided b)| 


£he response, was in regards to subpoena 


email ttj " 


referenced 


A Grand Jury Subpoena Duces Tecum Report was returned via 
Tor rne u.s. Attorney's Office, Eastern District of Virginia, on 1O/26//2015. The 


ps attached to this communication in a 1A. 


b3 

b6 

b7C 

b7E 


b3 

b6 

b7C 

b7E 


Investigation or 1 0/23/20 1 5 


at 


Washington, DC 



This document contains neither recommendations nor conclusions of the FBI It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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Date of transcription 1 1/9/2015 


fromT 


fUAffetJO^ On November 9, 2015, SA 


The package froij~ 


Subsequentl y forwarded said packa ge to S 


Contained a l etter an<J 


eceived a Certified M; 


The letter indicate( 

"[would be provided in a later package. On 1 1/12/2015. SA[ 



in response to subpoena 


b3 

b6 

b7C 

b7E 


Report was returned via email t<j 
The referenced letter anc | fr re maintained in a 1 A. 


^received information indicating 


, A Grand Jury Subpoena Duces Tecum 

Jof the U.S. Attorney’s Office, Eastern District of Virginia. 


Investigation on 1 1/9/2015 


at 


Washington, DC 



This document contains neither recommendations nor conclusions of the FBL It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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Date of transcription 1 1/12/2Q15 


(imouo) On November 12, 2015, SA 


received a FedEx package from 

1 (subsequently forwarded said 

package to The package trod 

Contained a letter anq | 

1 Hn response to subpoenal 

The letter 

indicate^ 

in 

response to the subpoena. A Grand 

Jurv Subpoena Duces Tecum Report and 


|was returned via email to 


maintained in a 1 A. 


]of the U.S. Attorney’s Office, Eastern District of Virginia. The referenced letter an <□ are 


b3 

b6 

b7C 

b7E 


Investigation on 1 1/12/201 5 


at 


Washington, DC 



This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 1 1/1 7/20 1 5 


r 


fliwwi On November 17. 2015. SAl 


li 


received a FedEx package from. 


opened the packag e which contained a letter andf 

in resnnnse tn snhnnenaf 


indicateq 

Jury Subpoena Duces Tecum Report was returned via email tcf 


[The letter 


Eastern District of Virginia. The referenced letter and| frre maintained in a 1A. 


In response to the subpoena. A Grand 

of the U.S. Attorney’s Office, 


b3 

b6 

b7C 

b7E 


Investigation on 1 1/17/2015 


at 


Washington. DC 



This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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bS 

blC 


HRC-3122 



ALL INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 1 2“2 2 “2 0 1 6 BY J76J18TS0 USIC 


FD-302a (Rev r 10-6-95) 


- 1 - 

FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 1 1/23/2015 


(U/ /FOU e -) On November 23, 2015, Fo A 


mefl 


~| provided FoW 


at his place of employment located a t 

1 constituting a supplemental response to subpoena # 


fo3 

b6 

b7C 

b7E 


^re 


maintained m a 1 A. 


Investigation on 1 1/23/201 5 at Bcthcsda, MD 


File# 


Igj -3 2- 


Datc dictated N/A 


By FoA| 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents arc not to be distributed outside your agency 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 12/1/2015 


(U//TOIjQ) On November 25, 2015, 


fron[ 


cq 

~| which he subsequently forward ed to S/j 
Jcontained an attachment/letter response to subpoena[ 


rec eived an email from 


referenced email and lett er are maintai 
also returned via email tol 


|The email 

]The 




ed in a 1 A. A Grand Jury Subpoena Duces Tecum Report was 
f the U.S. Attorney’s Office, Eastern District of Virginia. 


b3 

b6 

b7C 

b7E 


Investigation on 1 1/25/201 5 


File # 


Pi 



Washington. DC 


Date dictated N/A 


By SAl 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 12/1 1/2015 


saT 


On December 8. 2015. FoAl 


fromf 


received a Federal Express package sent to 


The package tiron| 


b3 

b6 

b7C 

b7E 


InHirat^rf 


Inrnyided was in response to 


The response fron£ 


as well as a copy of the original subpoe na and the asso ciated Grand 


Jury Subpoena Duces Tecum Report - returned via email on December 9 to 
Attorney's Office, Eastern District of Virginia- are maintained in a 1A. 


bf the U.S. 


b3 

hS 

blC 

b7E 


Investigation on 12/8/2015 
File # _| |GJ 


at Washington. DC 


n 


Date dictated N/A 


b3 

b7E 


By FoA^ 



This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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Dale of transcription 12/15/201 5 


(U//FOUO) On December 15, 2015, Si 

received a UPS letter fron 

b3 

b€ 

b7C 


|The letter, which was addressed to SM 

contained a 

response to subpoen£| 

in whiclj 

indicated they were unable to 

b7E 


find any informatio n responsive to the request. A Grand. Jury Subpoena Duces Tecum Report was 
returned via email td Inf the U S Attorney’s Office, Eastern District of Virginia, on 


December 1 5, 201 5. The referenced letter is attached to this communication in a 1 A. 


Investigation on 12/15/2015 


at 


Washington, PC 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 12/2I/2Q1 j 


fU//rOU0) On December 21. 201 5. S/ received a letter and 

b3 

b6 


1 The letter andl Iwhich were mailed to SA 

b7C 


and subsequently forwarded via email to SA Icontained a response to 

b7E 

subpoenal 

A Grand Jury Subpoena Duces Tecum Report was returned via 


email to 

bf the U.S. Attomev’s Office, Eastern District of Virginia, on December 21, 2015. 


The referenced 

letter is attached to this communication in a 1 A. 
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Investigation on 12/21/2015 


at 


Washington, DC 



b3 

b7E 

b6 

b7C 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 


HRC-3131 



b6 

b7C 



ALL FBI IHFGR^iAT IDH CONTAINED 


HEREIN 


IS UNCLASSIFIED 


DATE 


1 2“2 2 “2016 BY J76J18T8Q WSICG 


FD-302a (Rev. 10-6-95) 


- 1 - 
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Date of transcription 12/22/201 5 


contained a response to subpoenal 
request for information pertainingicf 


On December 2^ r 2015, SA | R eceive d a UPS letter ffon| 

The letter, which was addressed to S/j 


conversation with Forensic Account 


email t< | 

The reference^ 


responded to the 


b3 

b6 

b7C 

b7E 


that they were unable to locate 


b ut indicated in a phone 


A Grand Jury Subpoena Duces Tecum Report was returned via 
|of the U.S. Attorney's Office, Eastern District of Virginia, on December 22, 2015, 


letter is attached to this communication in a 1A, 


Investigation on 12/21/2015 


at 


Washington, DC 
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On December 21. 2015, | receiv p ^ an ^tnail frnnJ 

Trhe email- which was addressed tn SaI 


indicated they did 


response to subpoena | 

not have informatio n responsive to the request. A Grand Jury Suhpoena Duces Tecum Report was 
returned via email tq )f the TJ.S. Attorney’s Office, Eastern District of Virginia, on 


Contained a 


December 22, 2015. The referenced email and attachment are attached to this communication in a 1A. 
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This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 


b3 

b7E 

b6 

b7C 


HRC-3135 



b6 

b7C 



HRC-3136 



ALL TBI INFORMATION CONTAINED 

HEREIN 15 UNCLASSIFIED 

DATE 12-22-2016 BY J76J1ST8Q NS ICG 


FD-302a (Rev. 10-6-95) 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 12/23/2015 


(U//F0UQ) On December 23, 2015, S l 


received a UPS package containing a 


letter anc 



A Grand Jury Subpoena Duces Tecum Report was returned via email to 


of the U.S. 


Atto rney’s Office, Eastern District of Virginia, on December 23, 201 5. The referenced etter and 

are attached to this communication in a 1 A. 


Investigation on 12/23/2015 at Washington, DC 
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(U/#QtJ Q»On January 12. 2016. SA 
Lfroir j 


lixi response to subpoena 


Tecum Report was returned via email tq 

Virginia, on January 12, 2016. The referenced emai^ 


Ireceiv ed an email (forward ed bv SA 
l The email contained ! ~l 

|a 


Grand Jury Subpoena Duces . 
of the U.S. Attorney’s Offic e, Eastern District of 

are included in a 1 A. 
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fronf 


(Ulimm On January 12. 201 6. SAl 


The response was forwarded to S A 


(received a letter an d Su bpoena response 
|by SA | 


b3 

b6 

b7C 

b7E 


(U/ /FQU0 j [ also provide^ 


b3 

b7E 


(U/ /TOUO ) A Grand Jury Subpoena Duces Tecum Report was returned via email tol 
of the U.S. A ttorney’s Office, Eastern District of Virginia, on 1/19/2015. The referenced] 
land is attached to this communication in a 1 A. 
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Investigation on 1/19/2Q16 at 

GJ -HI 


Washington. DC 
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from 


fU Z/rOUQ ) On January T9. 2016. S/nT 


Teraived 


was forwarded to SAf 


bySAl 


a 1 fitter and Snhnryng response 

The response 


(U//FOU0) A Grand Jury Subpoena Duces Tecum Report was returned via email tol 
of the U.S. Attorne y’s Office, Eastern District of Virginia, on 1/19/2015. The referenced! 


land is attached to this communication in a 1 A, 
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letter anq_ 
contained, 
< letter and 


h On December 23. 7.015. SAl lrpppivf*H a i ipfi package containing a 

, , | The package I 

ise to subpoena A previous response froir 

were submitted to the tile in serial 39 of captioned investigation/subfile. Tne reterencec 
pre attached to this communication in a 1 A. 
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(U//TOUO) A Grand Jury Subpoena Duces Tecum Report for both returns were sent via email to 

lofthe U.Si Attorney's Office, Eastern District of Virginia, on 2/4/2016* The referenced 

and are attached to this communication in 2 separate 1 As. 
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response froml 


(U//F€ HJQ) On February 5, 2016, S A 


received a letter and Subpoena 


(U//TOUO) A Grand Jury Subpoena Duces Tecum Report was returned via email fiL 
of the U,S , Attorney's Office, Eastern District of Virginia, on 2/10/2016. The referenced! 


pnd is attached to this communication in a 1 A. 
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(U//FQBQ) On February 10, 2016, S/\ received an email fr om| 

The em ail, which was originally sent t o SA| bnd sub sequently 


■ ~ | ? d t/ 

forwarded to SA pontained a response to subpoena 

Jury Subpoena Duces Tecum Report was returned via email to | 
Eastern District of Virginia, on February 1 1, 2016. The referenced! 
attached to this communication in a 1 A. 


A Grand 


Jof the U.S. Attorney’s Office, 
lemail and response are 
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at 
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Precedence: ROUTINE 


Date: 2/17/2016 


To: Washington Field 
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From: Washington Field 

CI-13 

Contact: FoA 


Approved By: 
Drafted By: 

Case ID #: E^//WF4 


GJ - VT 


Title: (&<£*&) .tj, MIDYEAR EXAM; 

MISHANDLING OF CLASSIFIED; 

UNKNOWN SUBJECT OR COUNTRY; 

SENSITIVE INVESTIGATIVE MATTER (SIM) 

FEDERAL GRAND JURY MATERIAL - DISSEMINATE PURSUANT TO RULE 6 <E) 

Do not disseminate except as authorized by federal rule of criminal 
procedure 6(e). 
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b7E 
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b7E 


Enclosure (s) : , 

1. (U//-FQU©} - Referenced! 


Details : 

(U) Background ^ 

(U/ /FOUO ) In July 2015, the FBI initiated the captioned investigation 
based on an 811 referral from the Inspector General for the 
Intelligence Community (ICIG) regarding the possible compromise of 
classified national security information. 

(U//F0U9) The potential compromise was identified when, as part of 
a Freedom of Information Act (FOIA) request, the U.S. Department of 


S 


/NOPORN 


HRC-3153 



{Rev. 05-01-2008) 



FEDERAL BUREAU OF INVESTIGATION 


State (DoS) Office of Inspector General and the ICIG were reviewing 
electronic mail communications from a private server previously used 
by a State Department official during their tenure at DoS. An initial 
review of this material identified several emails containing 
classified national security information some of which was Top 
Secret . 

(U//FOSJ©} was identified as being involved with the 

operation of this server and associated hardware {"the server") . 
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flJ//FOU0) Oil February 23 . 2016. SA 


•eceived an email fforrj I 


kvhich was originally received bv SAl 

[The email contained 

in response subpoena 


A Grand Jury Subpoena Duces 

Tecum Report was returned via email tc| 

of the U.S. Attorney’s Office, Eastern District of 

Virginia, on February 24, 2016. The reference^ 

small ancf" 

are attached to this 
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Investigation on 2/23/2016 at Washington. DC 
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HJ// F OU Qj On February 12, 2016, 


iThe email contained" 


received a series of em ails from 

las fln flfHiti final regnrmgp trj subppena | 


^ ptating 

could be located. A Grand Jury Subpoena Duces Tecum Report was returned via em ail tq 
the U,S, Attorney's Office, Ea stern District of Virginia, on December 22, 2015 by SA 

kvere enclosed in a 1 A* 


stating no records 


it 
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FEDERAL BUREAU OF INVESTIGATION 
Electronic Communication 


Precedence: ROUTINE Date: 0 3/01/2016 

To: Washington Field 


From: Washington Field 



Title: MIDYEAR EXAM; 

MISHANDLING OF CLASSIFIED; 

UNKNOWN SUBJECT OR COUNTRY; 
SENSITIVE INVESTIGATIVE MATTER (SIM) 


b6 

b7C 


b3 

b7E 


iU) 


Synopsis: (U) To submit a DVD containing subpoena email to the file. 


■;Ui (X/NF4 


ClasSirfied^Bj 
Derived From 
D ec 1 ass^rflT'On : 


F36M2J 

JJSISCG 20090615 
204103^ 


(U) 


Full Investigation Initiated: 07/10/2015 

Detail a • 


On February 1 6 


L 2HX6_ in consultation with SSA 

burned emails containina 
a regions ea^o a DVD. This action was taken 


due to the fact that S 


unclassified account reached the 


h + 1 I o J- J- LUUil L X 

maximum size limit ana could no longer send email. The 
aforementioned DVD is attached to this communication as 


a 1A. 


b6 

b7C 


♦ ♦ 


Du NuL Upload- 
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Date of transcription 3/2/2016 


0J//F 0U01 O n February 24, 2016, S.A| 

|The package was provided to SAf 


rece ived a FedEx package from 
Ion March 2, 2016, and contained 


Report was returned via email tc[ 
on March 2, 2016. The referenced 


| A Grand Jury Subpoena Duces Tecum 

lof the ITS. Atto rney’s Office, Eastern District of Virginia, 


pre attached to this communication in a 1A. 


b3 

b6 

b7C 

b7E 


Investigation on 2/24/2016 at . 

File# _ -GJ ^ 


Washington. DC 


„ Date dictated N/A 


ByS^ 


This document contains neither recommendations nor conclusions of the FBI. Jt is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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Date of transcription 3/4/2016 


On March 3 2016 SaT 


lrpreivpH a package froml 


referenced^ 


1 


obtained a response to subpoena 

A Grand Jury Subpoena Duces Tecum Report was returned via email to 

of the U.S- Attorney's Office. Eastern D istrict of Virginia, on March 4, 2016. The 


b3 

b6 

b7C 

b7E 


bre attached to this communication in a 1 A. 
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b7E 


Investigation on 3/3/2016 at . 
File# 


ByS A 



GJ 


~ 1 



Washington, DC 

5TL 


Date dictated 


N/A 


JTiis document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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Date of transcription 3/09/2016 


fU//FOt O n March 8, 2016, SA| 

which was origi nally received hv SAf 

in response subpoen^ 


received and emai led subpoena return from 
The email contained 


lecum Keport was returned via email tq 
Virginia, on March 9, 2016. 
communication in a 1A. 


JA Grand Jury Subpoena Duces 


of the U.S. Attorney's Office, Eastern District of 

and is attached to this 


b3 

b6 

b7C 
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[ 


ai/ /rOlJO ) On March 7, 2016, SAl 


subpoena[ 


Twhich was originally received bv 


email td 


£aT 

A Gr 


receive d and email subpoena return from 


J 


The email contained a response to 


b3 

b6 

b7C 


A Grand Jury Subpoena L)uces Tecum Report was returned via b7E 


| I i WT u X VVUJU xvwpvi Ir TYUO 1 V|LU 1IVU V U 

ptt ne u.Si. Attorney’s Offi ce, Eastern District of Virginia, on March 1 1, 2016. The 

information received frorr land is attached to this communication in a 1A. 


Investigation on 3/07/20 1 6 at 


File# 


Tgj - 


Washington. DC 

Date dictated N/A 


By SM 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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fromjj 


to subpoena] 


CU/ffO UO^ On February 26, 2016, Sj4 

Tvhich was originally received bv SA 


[The response Iroml 


received and email subpoena return 

I The email contained a resnnnsp 


jury sunpoena uuces tecum Keport was returned via email t< j 
Eastern District of Virginia, on March 18, 2016. The information received froml 
is attached to this communication in a 1 A. 


A Grand 

pf t he U.S. Attorney’s O ffice. 

and 


£ 


subpoenaf 


U/ /FOUO) On March 11,2016, SA 
hich was originally received by SA 


rece ived and email subpoena return from 
I The email contained a re<tnnn<te tn 


t 


A Grand Jury Subpoena Duces Tecum Report was returned via email tc|_ 


received from 


bt th e U.S. Attorney’s Offi ce. Eastern District of Virginia, on March 18, 2016. The information 


and is attached to this communication in a 1A, 
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fU//F©tfen On April 6, 2016, SA 

received a UPS letter front 

I iThe letter, which was addressed to S A 

contained a response to 

subpoena in which 

indicated they were unable to find anv 

information responsive to| 

\ Grand Jury 

Subpoena Duces Tecum Report was returned via email td 

|of the U.S. Attorney’s Office. 

Eastern District of Virginia, on April 6, 201 6. The referencec letter is attached to this 


communication in a 1 A. 
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(U//F OUO) On April 8, 2016, s/ 


forwarded fro m SAl 
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^received an email from Iwhich was 


The email contained a response to subooerial 
Grand Jury Subpoena Duces Tecum Report was returned via email td 
US. Attorney's Office, Eastern District of Virginia, on April 8, 2016. The reference^ 
is attached to this communication in a 1A. 


taf the 


response 
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O n Anrill 5. 2016. SAl 


was initially sent to SA 
which[ 


in 1 


]mdici 


received an email fro nT 


and contained a response to subpoend 


[The email 


because the records no longer exist| 

retention. A Grand Jury Subpoena Duces Tecum Report was returned via email tcj 

U.S. Attorney's Office, Eastern District of Virginia, on April 15, 2016, The referenced^ 
is attached to this communication in a 1A. 


[ted they w ere unable to find any information res ponsive to th e request 
Either stated the records extend bey ond Iperiod of 


bf the 
(response 
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OJ//rOUOi On April 13. 2016, SA 

received and email sub 

which was originally received by SA 

1 


a response to subpoena 


was returned via email tq 

28,2016. The information received fforr| 
1A. 


The email contained 

A Grand Jury Subpoena Duces Tecum Report 
|o f the U.S. Attorney’s O ffice. Eastern District of Virginia, on April 

and is attached to this communication in a 
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